Re: [gentoo-user] crypt my home repository

[Florian Philipp <lists@binarywings.net>]

[-- Attachment #1: Type: text/plain, Size: 1320 bytes --]

Am 02.01.2012 11:49, schrieb Florian Philipp:
> Am 02.01.2012 09:07, schrieb Stéphane Guedon:
>> Hi all
>>
>> I may ask something already discussed, but I can't find any good documentation.
>> I am wondering of how to secure my home repository on my laptop. I am thinking 
>> of cryptography and other things (the password uncrypt the repository and 
>> allows to read files...).
>>
>> What tool to use for ? Anybody knows a good doc (in french would be really 
>> good) ?
>>
>> I am not really paranoïd, but I work now in a quite important environnement 
>> and want any data I get out to be secured...
> 
> I recommend dm-crypt (a.k.a. cryptsetup-luks). It encrypts the block
> device under the actual file system. Gentoo wiki has some tutorials on
> it (although you don't need much of it): [1] [2]
> 
> If you only want to encrypt your home partition, you only need to follow
> these steps:
> 
> 1. Create an encrypted partition (see `man cryptsetup`)
> 2. Move /home/* over to it (don't forget backup)
> 3. Configure /etc/conf.d/dmcrypt
> 4. Add /etc/init.d/dmcrypt to boot runlevel
5. Add it to /etc/fstab (the 'target=' line in /etc/conf.d/dmcrypt
specifies the name).
> [...]

I recommend testing it with some easily recoverable file system like
/var/tmp or /usr/src/portage.


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 262 bytes --]